Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft
File: O9PjKvOv0JXELXIXKlnGWfMty-c.mft (raw, json)
Hash identifier: aq6LDE/V+aEuXSeFsoVaSNt6vTx9Y38VqOSPzcOPp6o=
Subject key identifier: 53:3A:15:FB:53:D4:2B:B4:EA:A0:C2:D2:8E:BC:13:81:38:17:15:9E
Authority key identifier: 3B:D3:E3:2A:F3:AF:D0:95:C4:2D:72:17:2A:59:C6:59:F3:2D:CB:E7
Certificate issuer: /CN=3BD3E32AF3AFD095C42D72172A59C659F32DCBE7
Certificate serial: 0743
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O9PjKvOv0JXELXIXKlnGWfMty-c.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft
Manifest number: 0743
Signing time: Fri 21 Mar 2025 00:26:54 +0000
Manifest this update: Fri 21 Mar 2025 00:26:54 +0000
Manifest next update: Fri 21 Mar 2025 06:26:54 +0000
Files and hashes: 1: O9PjKvOv0JXELXIXKlnGWfMty-c.crl (hash: qWfXSMtJ9+6R0oean+j8nHLlWy76BxrVQwhFe00H3/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859 (0x743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BD3E32AF3AFD095C42D72172A59C659F32DCBE7
Validity
Not Before: Mar 21 00:26:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=533A15FB53D42BB4EAA0C2D28EBC13813817159E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:cf:25:50:1a:42:a3:09:7d:f1:1d:ce:22:
30:fe:69:11:43:4d:67:ce:78:dd:6e:48:54:3e:a9:
44:24:60:8b:bb:11:98:3f:6b:4f:dd:3f:5d:be:55:
78:eb:42:ed:96:31:ff:e8:60:9f:ff:51:8c:c7:e7:
4b:e9:95:46:3e:ce:db:19:90:1b:65:c7:15:ab:75:
d5:03:2f:2c:ba:a7:b7:65:ec:7f:f7:d4:6c:d4:a2:
3c:67:dc:a8:04:a8:d5:c5:59:5f:3c:3d:dc:ca:31:
37:76:6c:2f:38:d3:68:c4:2d:ca:b8:c4:ab:c8:cd:
40:f4:05:f9:97:01:e3:44:2e:69:2c:6d:69:31:19:
0c:f1:4a:fe:a2:90:49:34:0e:fe:bf:67:b7:76:00:
f3:73:88:1d:f4:19:7b:3a:0b:83:7b:12:d6:f3:55:
ce:53:9d:52:da:b3:3f:6f:88:cc:0c:50:53:48:0c:
62:56:42:7e:2b:97:bf:31:0e:0d:1c:15:92:14:7b:
11:18:95:30:f4:6e:ee:f9:24:2e:a2:0d:68:cf:34:
f5:24:65:b8:c4:70:93:eb:03:ea:af:39:92:37:4a:
63:82:31:15:6d:5d:21:d4:e1:80:5d:db:a6:d4:24:
0d:4d:95:48:51:97:0f:76:c2:a0:e6:97:7d:27:31:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3A:15:FB:53:D4:2B:B4:EA:A0:C2:D2:8E:BC:13:81:38:17:15:9E
X509v3 Authority Key Identifier:
keyid:3B:D3:E3:2A:F3:AF:D0:95:C4:2D:72:17:2A:59:C6:59:F3:2D:CB:E7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/O9PjKvOv0JXELXIXKlnGWfMty-c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3270/O9PjKvOv0JXELXIXKlnGWfMty-c.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7d:9f:15:36:97:fa:b7:a8:5d:76:aa:ca:a8:95:ed:3a:46:
80:90:b7:6c:c3:6e:1c:37:db:0e:1c:ad:02:66:9d:48:65:1d:
39:32:dd:fa:dd:1b:2e:30:f2:39:6e:b3:ee:25:53:ab:37:9e:
9f:bb:cb:3e:5a:3c:54:ee:f5:64:8e:8f:3c:81:ac:90:1c:97:
4d:d7:ac:a2:57:72:17:72:81:dd:45:74:7c:ed:f4:e3:a3:23:
48:4e:ca:9e:3e:88:cb:1a:6d:10:ee:75:f2:18:2e:74:a4:3e:
28:2f:d5:ca:e5:7e:8f:ce:99:c2:a7:7c:ab:ae:4c:29:f9:7b:
73:d2:e6:bc:fb:41:9a:17:37:ce:86:53:9d:6f:b8:66:2f:7d:
fe:40:bf:31:35:ed:a4:4b:78:51:1d:c8:59:15:f8:4f:73:4d:
c9:4f:2d:24:62:83:4a:da:58:8e:4d:f0:44:8a:c6:1b:80:71:
cc:a8:46:b2:26:3b:1a:dd:5b:f7:05:a1:62:d3:4e:c3:42:aa:
9c:a6:5c:f4:ca:c6:30:66:21:54:91:c0:50:21:f0:76:7d:f3:
61:b5:65:80:f6:08:68:18:a6:e9:2a:dc:39:bd:b2:27:1d:f6:
35:e0:b4:c3:c0:c3:f4:7e:f8:7d:e5:91:7e:15:f2:73:04:57:
75:37:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:34 2025 by rpki-client